C++ DLLs compiled with /MT crash

[LeonardoNve]

Hey, DLL compiled with /MT crash in x64 crashes instantly before DLL_PROCESS_ATTACH. This is because some CRT functions use RtlPcToFileHeader to get mapped image base. That function walks InvertedFunctionTable which is empty because Dynamic exception table is used instead. You need InvertedFunctionTable support for x64.

[TheCruZ]

Makes sense, other options would be redirect RtlPcToFileHeader from loaded library to custom shellcode that known the dll base/fallback to RtlPcToFileHeader, i Will take a look when get time